Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Das Abonnement wurde heute verlängert und ich möchte den Dienst nicht weiter nutzen.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2631758752

Proof data

Record hash (SHA-256)

0b6c543f5ac7527b965ed9d6f35733e2e83df9153dc06bd32283cef67f2f43cb

Signature (Ed25519, base64)

7azb3SBJRXTBq0YWc105YA80I5FT0AIyqGEtp+Se0lHqsFJaVCEa8VP3scf1SPKMDPJW8oTqq1C5Nbkaq0VKBg==

Merkle root

a705e7ecc0d73eb5dcdfda7cc03235bd57a2851764423cac43118a70cc8e7b3a

Merkle path

["0b67d4bacd299fc0c7c71436c690ce636d7c2dc1ef8afe5f76a10872e232119b","5b31c7be2444f179b6831e90dd256e59d85bd11ff8d93dfeee0a9dc0ef2ef985","74a2d9393f3f812ba1c43625a9bcdbe7d42d0185a2f3ff2640c48919ea28854e","c5d6c92087a84fba340c6cfaa737ed61158ce02f02e1d7168f49fa9f56a02100","0b3de5eb27685460af28e3d305745d77e194a3d86f52165d1cd3f68b1ab97264","345a2fcf6184dac97838fe62b467a24cefc023eb857308475966521a0f2e32ab","f0c3d85c2f38bc2bcf755fa4b9c014f4ce399b47e3e7b4e2fb6b86409ce411e2","c2cbc4b6e073bcd87e2f3af7a459bbaee71a16e76cea2a4465bfbf1ceaf7d74d","fbd91637e8c6fc26dc44ff2c056fb67c9a2763b722f87f922f6d1258c7dc272a","eb2c0df0ce17569867f7fde0ac52c350aac9eca6c7062236340507eafe39c2a6","2eb67b6dd2ce13ead3a6b8bbe53693e9ae2e03b472c64c48d866f83223e73d64","3d0dd87ae572e5992156e110773d66a0f1bf3ed6de2e93de25b994313f23112d","654e62da0e54472b4b5b9c8deb017fe0e371cb74d7538ff4ae544207e1da0bcc","a2d692bf5b7994c15c39856193482ea7c968acfbc3ff4915a355d04b18f7a933","79a9e38b2f2eb947c3bdfe67a6a6b2d9b99dab4a357fdf9e6328275c8035e767"]

Anchored

2026-08-29

Public log entry

search.sigstore.dev, log index 2631758752 · entry 108e9186e8c5677a44e9…

Expected log hash

b9abdd1fc769097342b82449a3caa919f2ee8419634ee5ba00692ee6314109be The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787969636370","kind":"published-quote","locale":"de","page":"product:proton/proton-vpn/de","quote":"Das Abonnement wurde heute verlängert und ich möchte den Dienst nicht weiter nutzen.","rating":1,"review_date":"2026-08-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a705e7ecc0d7…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.